PT-2026-50916 · Real · Realtimes Desktop Service

Erick Galindo · Publicado 2026-06-19 · Atualizado 2026-06-19 · CVE-2020-37251

Mitre

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

RealTimes Desktop Service 18.1.4 contains an unquoted service path vulnerability in the rpdsvc.exe binary that allows local attackers to escalate privileges. Attackers can place malicious executables in unquoted path directories to execute arbitrary code with LocalSystem privileges during service startup or system reboot.

Exploit

Correção

Enumeração de Fraquezas

CWE-428

Identificadores relacionados

CVE-2020-37251

Produtos afetados

Realtimes Desktop Service

Referências · 4

• 🔥 https://exploit-db.com/exploits/49021 · Exploit
• https://real.com · Nota
• https://vulncheck.com/advisories/realtimes-desktop-service-unquoted-service-path-privilege-escalation · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2020-37251 · Nota de Segurança